Cloud computing provides way to share information. This Information is secured at cloud ends only. Any third party intruder may hack confidential information. While outsourcing its business-critical data and computations to the cloud, an enterprise loses control over them. How should the organization decide what security measures to apply to protect its data and computations that have different security requirements from a Cloud Service Provider (CSP) with an unknown level of corruption? The answer relies on the organization's perception about the CSP's trustworthiness and the security requirements of its data. This paper proposes a decentralized, dynamic and evolving policy-based security framework that helps an organization to derive such perceptions from knowledgeable and trusted employee roles and based on that, choose the most relevant security policy specifying the security measures necessary for outsourcing data and computations to the cloud.

1. S. De, S. Saha, and A. K. Pal, "Achieving Energy Efficiency and Security in Mobile Cloud Computing", Proceedings of the 3rd International Conference on Cloud Computing and Services Sciences CLOSER 2013, SciTePress, 8-10 May 2013, Aachen
2. S. Bugiel, S. Nurnberger, A. Sadeghi, and T. Schneider, „Twin Clouds: An Architecture for Secure Cloud Computing", Workshop on Cryptography and Security in Clouds, 2011.
3. Y. Chen, and R. Sion, "On Securing Untrusted Clouds with Cryptography", Proceedings of the 9th annual ACM Workshop on Privacy in Electronic Society WPES'10, ACM, New York USA, 2010, pp. 109-114.
4. A. K. Pal and S. Bose, "Information Retrieval as a Service for Multiple Heterogeneous Data–Privacy Model", The Third International Conference on Parallel, Distributed, Grid and Cloud Computing for Engineering (PARENG 2013), Pecs, Hungary, 25-27 March 2013.
5. S. Pearson and A. Benameur, "Privacy, Security and Trust Issues Arising from Cloud Computing", 2nd IEEE Cloud Computing Technology and Science CloudCom, IEEE, 2010, pp. 693-702.
6. F. Rocha, and M. Correia, "Lucy in the Sky with Diamonds: Stealing Confidential Data in the Cloud", 2011 IEEE/ IFIP 41st International Conference on Dependable Systems and Networks Workshops, 2011, pp. 129-134.
7. R. Sandhu, and P. Samarati, "Access Control: Principle and Practice", IEEE Communications Magazine Vol. 32 Issue 9, IEEE, 1994, pp. 40-48.
8. R. Seiger, S. Gro?, and A. Schill, "SecCSIE: A Secure Cloud Storage Integrator for Enterprises", IEEE Conference on Commerce and Enterprise Computing, IEEE, 2011.

Service Provider Csp Credentials Encryption Decryption